CVE-2025-54212

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4

Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 are affected by a heap-based buffer overflow that may lead to arbitrary code execution within the current user's context. Exploitation requires a user to open a malicious file.

Recommendations: Versions prior to 20.4: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Version 19.5.4: At the moment, there is no information about a newer version that contains a fix for this vulnerability.